update release CI

[eluce2]

Note

Introduces stricter quality gates and centralizes environment management while refining type handling across packages.

• CI/CD: Split continuous-release into lint, typecheck, test (incl. 1Password + @proofkit/fmodata E2E), and build; release.yml adds manual trigger, TURBO env, and a quality job gating publish
• Secrets/ENV: New root op.env; removes per-package op.env and updates scripts to reference ../../op.env
• Tooling: Adds typecheck scripts across packages and a Turbo typecheck task; bumps turbo and pnpm; small lint script tweaks
• CLI/Deploy: Safer handling of envFile (defaults to .env); fixes category typing; improves provider wrapping types
• Typegen/Generators: Normalizes data source config (default type: "fmdapi"), narrows types to FmdapiDataSourceConfig, and filters ops by type
• Registry: Replaces shadcn type imports with local lightweight schemas; updates registry package scripts
• Auth installer: Ensures added config includes type: "fmdapi" and explicit envNames: undefined

^{Written by Cursor Bugbot for commit e0cc7d3. This will update automatically on new commits. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
proofkit-docs	Ready	Preview	Jan 10, 2026 7:58pm

[eluce2]

• add beads #99
• use doppler #98
• update release CI #97 👈 (View in Graphite)
• fix: typegen auth detection with default OTTO_API_KEY env var #96
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[cursor]

Missing npm authentication token breaks package publishing

High Severity

The NODE_AUTH_TOKEN environment variable was removed from the changesets/action step. Since actions/setup-node is configured with registry-url: "https://registry.npmjs.org", it creates an .npmrc that expects NODE_AUTH_TOKEN for authentication. Without this secret (previously set to ${{ secrets.NPM_ACCESS_TOKEN }}), the pnpm release command will fail when attempting to publish packages to npm with an authentication error.

 

[eluce2]

Merge activity

• Jan 10, 7:57 PM UTC: A user started a stack merge that includes this pull request via Graphite.
• Jan 10, 7:58 PM UTC: Graphite rebased this pull request as part of a merge.
• Jan 10, 7:59 PM UTC: @eluce2 merged this pull request with Graphite.